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Despite the large effort devoted to cybersecurity research over the last decades, cyber intrusions 
and attacks are still increasing. With respect to routing networks, route hijacking has highlighted 
the need to reexamine the existing protocols that govern traffic routing. In particular, our pri¬ 
mary question is how the topology of a network affects the susceptibility of a routing protocol to 
endogenous route misdirection. In this paper we define and analyze an abstract model of traffic 
interception (i.e. eavesdropping) in distance-vector routing networks. Specifically, we study al¬ 
gorithms that measure the potential of groups of dishonest agents to divert traffic through their 
infrastructure under the constraint that messages must reach their intended destinations. We relate 
two variants of our model based on the allowed kinds of lies, define strategies for colluding agents, 
and prove optimality in special cases. In our main theorem we derive a provably optimal monitoring 
strategy for subsets of agents in which no two are adjacent, and we extend this strategy to the 
general case. Finally, we use our results to analyze the susceptibility of real and synthetic networks 
to endogenous traffic interception. In the Autonomous Systems (AS) graph of the United States, 
we show that compromising only 18 random nodes in the AS graph surprisingly captures 10% of all 
traffic paths in the network in expectation when a distance-vector routing protocol is in use. 


1. INTRODUCTION 

Several recent events have demonstrated that internet 
routing protocols are particularly vulnerable to misdi¬ 
rections in routing 0 EEoJ EEU H5J. This brings up the 
question: How vulnerable are trust-based communication 
protocols to malicious agents who can abuse this trust? 

To answer this question, we present and study a model 
of traffic interception in routing networks largely inspired 
by real-life incidents. See Figure [l] for an example. In 
practice, a wide range of routing protocols are devel¬ 
oped and implemented for communications. For exam¬ 
ple, the Border Gateway Protocol (BGP) is used for 
inter-domain communications between autonomous sys¬ 
tems in the modern Internet; distance-vector and link- 
state routing protocols are used for intra-domain com¬ 
munications. Instead of going into the technical details 
of the protocols and their business models, we study 
a mathematical and parsimonious model for traffic in¬ 
terception in general. The model closely resembles the 
distance-vector protocols such as the Routing Informa¬ 
tion Protocol (RIP) [I2IIT6]. Due to their simplicity and 
efficiency, distance-vector protocols are widely used in 
moderate-size IP networks and ad hoc mobile networks 
mans]. Therefore, in this work we study a theoretical 
model for “distance frauds” m in an abstract setting 
of distance-vector protocols, and aim to provide a start¬ 
ing point to investigate security issues of other complex 
routing protocols. 


The model is stated formally in Section [3J but can be 
loosely described as follows. For a graph G in which ver¬ 
tices are agents, a subset S of agents are designated “col- 
luders” and the rest are “honest”. Honest agents main¬ 
tain a distance-vector recording their believed distances 
to all other agents in the network, broadcasting this in¬ 
formation to their immediate neighbors in each round 
and updating their beliefs with the information broad¬ 
casted to them. When honest agents send or forward 
a message, they route it to any neighbor that is closest 
to the message’s recipient. Meanwhile, colluding agents 
have knowledge about the entire graph and want to max¬ 
imize the number of messages that are routed through at 
least one member of S. They can achieve this by lying in 
their broadcasts to their neighbors making it appear they 
are closer to the message’s destination than they actually 
are. As a result, the honest agents will unknowingly for¬ 
ward messages to the colluding agents along a potentially 
suboptimal path (See, for example, Figure [l]). 

While it would seem easy for the colluding agents to lie 
in order to intercept messages, we impose the additional 
requirement that every message must eventually reach 
its intended destination, as frequently dropped messages 
would raise an alarm causing the colluders to be discov¬ 
ered. This makes strategy design difficult for the collud¬ 
ing agents, as they must carefully balance lying in order 
to attract messages while not overstating their proximity 
to the recipient which would cause never-ending cycles. 

Solving this problem not only provides a tool for ana- 
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Figure 1. An incident in connection with traffic interception as reported in na. where a “colluding agent” (square) in Ukraine, 
broadcasts a false distance and intercepts a message sent from an honest agent in Texas whose target is the British Telecom, 
that services the UK Atomic Weapon’s Establishment. The solid line indicates how the message should be routed under 
the presence of only honest agents. The dotted line demonstrates how the message is routed when the “colluding agent” 
(square) broadcasts a false distance, and reroutes the message to its intended target. The above image is a simplification of 
the documented rerouting, as the circle in the UK is in fact representative of multiple honest agents (autonomous systems). 


lyzing the susceptibility of a network to endogenous in¬ 
formation interception, but further informs protocol de¬ 
signers of the vulnerability of honest agents naively fol¬ 
lowing protocols of this type. Our contributions are to 
analyze this model at many levels from both theoretical 
and practical perspectives. In this article, we accomplish 
the following: 


• Formulate appropriate generalized combinatorial 
models for trust-based communication in networks 
(Section [3]); 

• Demonstrate that the case where each colluding 
agent may broadcast a different piece of infor¬ 
mation to each of its neighbors, the non-uniform 
broadcast model, reduces to the case where each 
individual colluding agent must broadcast the same 
information to its n eighb ors, the uniform broadcast 
model (Proposition |4.2| ); 


• Given a set of malicious agents S where none of 
them are adjacent, provide the optimal strategy re- 
gardi ng h ow the agents of S should broadcast (The¬ 
orem 


5.1); 


• Show that optimally choosing a s et of colluding 
agents is NP-complete (Section |4.1[ ); and 


• Provide simulations demonstrating that, for various 
types of real-world and synthetic networks, a very 
small portion of colluding agents, acting strategi¬ 
cally, can in fact intercept a significant proportion 
of messages. These results add a new perspective 


on the attack tolerance of scale-free networks [T]. In 
addition to being vulnerable to connectivity attacks 
by removing high degree nodes, they are vulnerable 
even to random interception attacks (Section [6]). 


This paper is organized as follows. In Section [2] we 
review related work. In Section [3] we define our models, 
and discuss their complexity in Section 4. In Section [5] 
we define our strategies, and in Section 5.2 we prove the 
optimality of our strategy (Theorem |5.1| ). We generalize 
the strategy of Theore m |5.1| to the general case of con¬ 
nected agents in Section [5.3| In Section [6] we empirically 
evaluate the quality of our strategies, and in Section [7] 
we conclude with open problems. 


2. RELATED WORK 

There has been an extensive literature on secure de¬ 
signs of the distance-vector routing protocol [13 [231 [251 
[26] and on algorithms that detect potential security is¬ 
sues U 0 E2]. Our work deviates from those lines in 
mainly two ways. First, as discussed in the Introduction 
we study a theoretical model for “distance frauds” m 
in an abstract setting of distance-vector protocols. Sec¬ 
ond, rather than developing algorithms to detect mali¬ 
cious agents we aim to understand the potential of groups 
of dishonest agents to divert traffic through their infras¬ 
tructure. Recent high-profile internet outages [24] have 
proven that traffic attraction or interception is an impor¬ 
tant security issue of modern Internet, attracting large 
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attention on the threat models, incentive schemes, and 
secure alternatives for BGP 

Our work is in the spirit of [2], where the authors seek 
to provide estimates on the amount of traffic that can be 
intercepted or hijacked by colluding agents. In contrast 
to their work, we want to focus on information intercep¬ 
tion and we disallow “black-holes”, a type of attack that 
results in numerous dropped messages. Consequently, 
identifying strategies that promote information monitor¬ 
ing by maximizing traffic to the colluding agents becomes 
highly non-trivial. In order to ease the theoretical anal¬ 
ysis, we move away from BGP and adopt the framework 
of distance-vector routing protocol. Furthermore, we as¬ 
sume that the honest agents are unsuspecting of the pos¬ 
sibly nefarious objectives of the colluding agents. We 
prioritize studying traffic interception over hijacking at¬ 
tacks with “black holes”, as in the latter case the honest 
agents would immediately realize that one of their rout¬ 
ing paths has been compromised. Consequently, we be¬ 
lieve our model will serve as a fundamental tool in analyz¬ 
ing the more involved problem (not discussed here) where 
honest agents actively seek out the colluding agents, and 
the colluding agents must not only optimize the amount 
of traffic sent to them, but also they must conceal their 
identities from the honest agents. 


3. MODEL AND PRELIMINARIES 

For our study, we focus on a finite, unweighted, undi¬ 
rected graph G = (V, E ) with V = {1,..., n} being the 
agents. We will write i ~ j if {i, j} G E , i.e., nodes i and 
j are adjacent. 

The model employs two types of agents represented by 
the vertices. First are honest agents which follow an au¬ 
tomated protocol. This protocol allows the honest agents 
to learn about the distances between themselves and vari¬ 
ous other agents over time. As a result, for any given des¬ 
tination, each honest agent learns to which of its neigh¬ 
bors it should “optimally” route a message. Second are 
colluding agents who make various choices within mild 
constraints. Colluding agents act cooperatively with the 
goal of intercepting as many messages as possible. They 
achieve this by broadcasting (potentially) false distances 
thereby tricking the honest agents into routing messages 
along a suboptimal path. 


3.1. What honest agents do 

Each honest agent i maintains an n -length vector, 
(p t (i, 1), p*(i, 2), • • • , //(i, n)), corresponding to all the 
believed distances for agent i between i and every agent 
at time t. 

Each agent, i, initially sets to 


otherwise. 

While honest agents do not know the topology of the 
network, they can learn about the distances between 
other nodes with a synchronization protocol At each 
step, each honest agent will receive broadcasts from its 
neighbors (including both honest and colluding agents) 
on their believed distances and update the information 
as follows. 

p t+1 (i,j) = minj y(i,j), 1 + min p\k,j)} (2) 

k^i 

An example of the synchronization process is illus¬ 
trated in Figure |2j One can observe that the distance 
p^j) is nonincreasing with respect to t. Further, if all 
agents are honest the p l (i, j ) will converge in at most n— 1 
rounds. We will denote p(i, j) the stationary distances in 
the end of the synchronization protocol. All our analyses 
are based on the stationary distances p(i,j). 

Afterwards, each honest agent, i, establishes a, forward¬ 
ing policy which is an array of n-sets, = (bij)f =1 where 
bij is the set of neighbors of i advertising the shortest 
path to j. That is, 

bij = argmin^ p(k,j) (3) 

where the argmin is a set of all such minimizing ar¬ 
guments. Finally, when agent i must forward a message 
whose destination is node £, it forwards to a uniformly 
random node in bij- The random choice is made inde¬ 
pendently for every forwarding event. 

Observe that if all agents are honest, the p(x,y) is 
precisely the graph distance from x to y which we de¬ 
note as d(x,p), and also for any shortest-distance path 
x = t’o, vi, ..., vg = p, we have Vi+i G b Vi:V for all 
i = 0, ...,£— 1. Conversely, for a node w to optimally 
route a message to y, w simply forwards the message to 
any member of b WjV . 

3.2. What colluding agents can do 

The colluding agents work together and form a strat¬ 
egy by choosing a broadcasting distance p t (f,-), and a 
forwarding policy b v for each colluding agent v. The 
colluding agents do not update their believed distances 
p based on the broadcasting distances from their neigh¬ 
bors; instead, they can broadcast any distances to gain 
traffic, and our goal is to find the “best” value of p{v , •) 
for every colluding agent v. In this case broadcasts will 
not change across rounds, which means that agent v will 
broadcast the same p(v , •) across all rounds, and so we 
drop the superscript for time for colluding agents. 
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Round 0 


p° (z, z) = 0 p° (oj, 2 ) = 1 



Round 1 


p 1 ^) = 0 p 1 {x,z) = 1 



p 1 ( y , z) = 1 p 1 0, 2 ) = 2 

= (4 K,z = {*, 2/} 


where each agent in S acts like an honest agent by broad¬ 
casting the true distance is admissible. We call this the 
honest strategy. 

We analyze the effectiveness of a strategy by the num¬ 
ber of node-pairs for which the colluding agents neces¬ 
sarily intercept a message. In this sense, we take the 
worst-case approach for the colluding agents. To make 
this formal, given a set of colluding agents S and admissi¬ 
ble strategy #, let ps,e be the proportion of pairs of nodes 
{i, j} such that every corresponding path between i and 
j passes through some node in S. Further, a strategy is 
beneficial if p s ,e > Ps,o honest , where 6> ho nest is the honest 
strategy. 


Figure 2. (Left) Initially, nodes x and y know that they are 
neighbors to node z and have a perceived distance p = 1 to 
z. In contrast, node w does not know its distance to z and 
denotes it as 00 . (Right) After 1 round, nodes x and y both 
tell ic, that they are distance 1 from z. Hence, node w updates 
is distance p to z to be 2 and stores which of its neighbors (x 
and y) are on the shortest path from w to z. 


During each step of the the synchronization protocol, 
each colluding agent will broadcast its p to all of its neigh¬ 
bors. The honest neighbors will perceive these distances 
to be real and update their believed distances p, and b in 
equations [2] and [3] accordingly, converging in n — 1 steps. 

Allowing any strategy will potentially cause messages 
to route in a loop without reaching its destination. For 
example, see Figure [3] Hence, we restrict the space of 
admissible strategies to be those that do not determin¬ 
istically cause such loops. Further, agents cannot falsely 
advertise to be destinations they are not. In the language 
of BGP, we disallow “black holes.” 

To define this formally, we say a path from s to £, s = 
vq, tq, . . •, V£ = £, is a corresponding path if Vi+i G b v .j 
for i an honest agent. That is, a corresponding path has 
each honest agent forward each message to a neighbor 
advertising a minimum distance where colluding agents 
choose to whom they forward messages. A strategy is 
then admissible if there is a corresponding path between 
every pair of nodes. 

An admissible strategy is one for which every mes¬ 
sage will with high probability over tie breaks by honest 
agents, eventually reach its destination. Although it may 
travel along cycles during its routing, with overwhelming 
probability the number of steps will be polynomial in the 
size of the graph. This may be thought of as the weakest 
form of avoiding black holes, and it allows our analysis 
to focus on ensuring the existence of some optimal path 
from the source to the target. Equivalently (up to high 
probability over tie-breaks), we may assume that honest 
agents, when faced with a tie between an option that will 
cycle and an option that will not cycle, will choose the 
latter to break the tie. 

It is worth noting that for every set S the strategy 


4. ALGORITHMIC ANALYSIS 

In this section, we explore various algorithmic ques¬ 
tions. First, we demonstrate that optimally selecting a 
set of colluding agents of a fixed size is NP-hard. We 
achieve this by reducing the problem to vertex covering. 
Additionally, we give examples where the optimal effec¬ 
tiveness of a set of colluding agents S is not submodular. 
Finally, we prove that a variant model where the collud¬ 
ing agents S may broadcast different, potentially false, 
messages to its neighbors reduces to the case where the 
broadcast is uniform. 


4.1. NP-hardness and submodularity 

We investigate the algorithmic properties of optimally 
choosing a set of colluding agents by considering the case 
when the agents use the honest strategy, ^honest • In which 
case, how do we pick which nodes should collude? In fact 
the problem of optimally selecting nodes reduces to the 
following: 

Problem 4.1 (p-Shortest Path Dominating Set). Given 
a graph G = (V,E) an integer k > 1 and p G [0,1], is 
there a set S C V of size k so that at least p(™) shortest 
paths pass through S ? 

We abbreviate this by SPDS(p, k) and say a vertex v 
covers a path if it lies on the path. There are two natural 
optimization problems associated with SPDS. The first, 
MAX-SPDS(—, fc), is to maximize the p achieved over all 
sets of size k. The second, MIN-SPDS(p, —), minimizes 
k while attaining a prespecified p. SPDS(p, k) is trivially 
NP-hard because SPDS(1, k) is VERTEX-COVER. 

By a standard argument, the function / : 2 V —)> [0,1] 
mapping S to the proportion of shortest paths covered 
by S is submodular[20] and monotone. Hence, by a clas¬ 
sic theorem of Nemhauser, Wolsey, and Fisher the 
greedy algorithm provides a (1 — l/e)-approximation al¬ 
gorithm for MAX-SPDS(—, k). A slight variant of the 
greedy algorithm presented by Wolsey [28] achieves a p- 
proportion of shortest paths with a set S of size 











5 


d(s , z) = 4 


d(s, 2 :) = 4 




d(s, 2 :) = 4 


O O ©■ .0 

o-© © 

d(x , z) = 5 


d(s, z) = 4 




z) = 5 
P(x,z) = 1 



O 

o 



Figure 3. For simplicity, in the figure above we drop the time subscript for p and assume the broadcast does not change. 
Consider an undirected graph (top left) where the node q wants to send a message to z. If nodes are broadcasting their true 
distances (top right), the induced directed graph illustrates how the message travels from node q to node z. If node x, a 
colluding node, overzealously broadcasts a distance that is too small to all of its neighbors (bottom left), the message will 
never reach z and hence is inadmissible. However, if x broadcasts the same false distance (of 3) to all of its neighbors as in the 
uniform model (bottom right), node x captures the traffic coming from q. We construct a corresponding path by considering 
the case where node s forwards the message to u (as u and x are broadcasting the same distance), which demonstrates that 
the strategy is indeed admissible. 


\s\ 


1 + logma xf({v}) 

vEV 


OPT = [1 + 0(log(n))] OPT 


where OPT is the size of the smallest set covering a p- 
proportion of shortest paths. 

A similar reduction from VERTEX-COVER shows 
that the problem of picking colluding nodes and a good 
strategy for lying is also NP-hard. Moreover, the collu¬ 
sion problem is not submodular. We prove this below, 
and as such, we will henceforth focus on the problem of 
determining the optimal strategy for a given set of col¬ 
luding agents. 

Proposition 4.1. Fix 6(S) mapping subsets of vertices 
to optimal strategies. Define f : 2 V ^ -© M by letting 
f(S ) be the number of shortest paths passing through S 
when S uses the strategy 0(S). Then f is not submodular. 

Proof. Let G = 2 be the complete bipartite graph 

on parts V, Y with X = {p, g}, |V| = m. Let S' = 
{},T = {p}. Then adding q to T captures every path 


in G. Adding q to S captures only the messages sent to 
and from q, because other messages are routed via p. In 
particular, 


f(S U {, q }) - f(S) = 2(m + 1) = 0(m) 

f(T U {q}) - f(T) = 2 (fi + ^ - 2(to + 1) = 0(m 2 ), 

disproving submodularity. □ 


There are also interesting examples of this that rely on 
lies in a nontrivial way, for example when G = C n for 
sufficiently large n. In this case a single node has little 
advantage, but adding a second adjacent node allows for 
an interesting collusion. One of the two colluders may 
broadcast 1 for most targets, and forward incoming mes¬ 
sages to the its neighboring colluder who in turn forwards 
along C n to the target. We discuss the broadcast bounds 
for this case in Section Iffi3l 
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4.2. Non-uniform broadcasting and a reduction 

Previously, we required each colluding agent to broad¬ 
cast its false distances uniformly to all of its neighbors. 
However, realistically, a colluding agent could make vary¬ 
ing broadcasts to different neighbors. We refer to this as 
the nonuniform model and the previous as the uniform 
model. 

Formally, the only difference between the models is 
that for the nonuniform model, the colluding agents must 
establish a more precise broadcast strategy, p(u,£,i), for 
each colluding agent v and each neighbor i. 

Nonuniform lies might appear at first glance to pro¬ 
vide a substantial increase in power. In particular, there 
are many more strategies, and it seems easier to acciden¬ 
tally introduce a large cycle, so it seems computationally 
harder to find an optimal solution. However, we show 
this is not the case. Finding the optimal nonuniform 
strategy for a fixed subset is reduces to finding the op¬ 
timal uniform strategy. Because the uniform model is 
also a special case of the nonuniform model, this shows 
the two problems are computationally equivalent. This 
justifies a focused study of the uniform model. 

Consider the following decision problem: 

Problem 4.2 (UNIFORM-SUBSET-MONITORING). 

Given a graph G = (V,E), a subset S C V and a 
p G [0,1], is there an admissible strategy 0 for S such 
that in the uniform broadcast model ps,e > p ? 

Similarly for nonuniform lies, we analogously de¬ 
fine NONUNIFORM-SUBSET-MONITORING. We will 
prove that the nonuniform case reduces to the uniform 
case with a small blowup construction. 

Proposition 4.2. NONUNIFORM-SUBSET- 

MONITORING reduces to UNIFORM-SUBSET- 
MONITORING. 


Nonuniform Broadcast Uniform Broadcast 




Figure 4. An illustration for Proposition |4.2| Given a graph 
G , a set of colluding agents S (shaded circles), and a frac¬ 
tion p for the nonuniform model (left panel), we produce a 
new graph G', a new set of colluding agents S' (shaded cir¬ 
cles), and a fraction p for the uniform model (right panel) 
by inserting a new colluding agent to every edge connecting 
a colluding agent in S and a honest node. We show in the 
proposition that a nonuniform broadcasting strategy in the 
left is equivalent to an uniform broadcasting strategy in the 
right. 

in the nonuniform setting. This simulates #, and hence 
achieves the same p(^) paths in G; the formula for p' 
simply counts the paths introduced by the new vertices 
(all of which include a colluding agent). So if psp > p in 
G, PS', 9' > p' in G'. 

Conversely, we can collapse any uniform strategy for 
S' into a nonuniform one for S by contracting all the 
newly added edges in G' and combining their broadcasts 
in the obvious way. The case where G is irregular is anal¬ 
ogous, and it’s clear the appropriate p' can be efficiently 
computed. 

□ 


5. STRATEGIES FOR THE UNIFORM MODEL 


Proof. Given a graph G, a subset S', and a fraction p 
for the nonuniform model, we produce a new graph G', 
a subset S', and a fraction p' for the uniform model as 
follows. (See figure 4 for an illustration). For simplicity 
we will prove the case where G is D-regular. Start by 
setting G' = G. For each edge e = (u,v) where u G S, 
subdivide e in G' with a new vertex w e . Also for each 
such edge, add u,w e to S'. Finally, set 


P = 


d'U + CT) + \s\\v\ 

(|V| + |S|D) 


Suppose there is a strategy 9 for S, G achieving a p 
fraction in the nonuniform model. We’ll convert 0 into 
a strategy 6' for S'. Whenever a colluding agent u G S 
would broadcast p to a neighbor v, we have the agent 
W( UjV ) uniformly broadcast p. And whenever a message 
goes to W( UjV ) with some other destination, W( u ^ for¬ 
wards it through u , who in turn forwards it to the 
corresponding to the same v' that u would forward to 


We now turn to a detailed study of the uniform broad¬ 
cast model. In this section, we define the optimal strat¬ 


egy in Section 5.2 and prove that it is optimal. Mini¬ 
mizing the distances broadcasted by the colluding agents 
optimizes the traffic captured by the agents; therefore, 
to prove the optimality of the strategy we show that it 
achieves the minimal distances that could be broadcasted 
by the colluding agents without causing “black holes”. 
Our main result is the following: 

Theorem 5.1. Let G = (V,E) be a graph and S C V 
a fixed subset of vertices such that the actual distance 
d(x,y) > 2 for all x,y G S. Then the strategy p* defined 
in Section \5~f2 \ intercepts an optimal fraction of traffic in 

G. 


The proof consists of two parts. After defining the 
broadcast policy p* in Section [5^2] and the associated for¬ 
warding policy, we first prove in Proposition |5.4| that the 


strategy is admissible, and then in Proposition 5.5 that 
p* is the minimal broadcast for any admissible strategy. 
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5.1. A single agent 

We start by characterizing the case of a single colluding 
agent. This case is useful because it forms a “base case” 
for our more complicated strategies later. In this case, 
the best strategy is simple: lie exactly two less than your 
true distance to a target. We show that this is guaranteed 
not to cause cycles while any larger lie causes a cycle of 
length 2 . 

Before we state the theorem below, we remind readers 
that d(x,t) is the true graph distance from node x to 
node t. 

Theorem 5.2. Let x be a colluding node and t be a tar¬ 
get node whose true distance in G is d(x, t) = k. Suppose 
that x broadcasts p(x,t) = k!. Then this strategy is ad¬ 
missible and beneficial if and only if one of the following 
conditions hold. 

1. k! — k — 2 and there is a neighbor z of x with 
d(z , t) = k = k' + 2 . 

2. k — 2<k'<k — 1 and there is a neighbor z of x 
with d(z,t) = k + 1, and there is a shortest path 
from z to t that does not pass through x (before x’s 
lie). 

Proof. Note that d(xfi) = k if and only if the closest 
neighbor y of x to t has distance d(y,t) = k — 1. The 
strategy for x will be to route all messages to t through 
y • 

For one direction, suppose one of the above conditions 
holds and let z be a neighbor of x satisfying the desired 
property. Then z will send messages to t through x, 
which x can forward through y. We further claim that 
no message forwarded through y to t will ever come back 
to x. Call y,v 2 ,^ 3 ,... the vertices on the route taken 
by the sent message after passing through x. We con¬ 
struct a corresponding path by requiring that x (as 
d(y, t) = k — 1 ensures that y has a neighbor V 2 such that 
d(v 2 ,t) = k — 2 ) and it follows that the perceived dis¬ 
tances p(vi,t) along the message’s path from t are mono- 
tonically decreasing in i. This follows from the fact that 
x broadcasts the same lie to all its neighbors. In partic¬ 
ular, p(x,t) = p(v 2 ,t) and so for all j > 2 , Vj will always 
have a closer neighbor than x. 

For the converse, suppose the strategy is admissible 
and beneficial. First, x cannot broadcast p(x,t) < k — 2 , 
or else y (and by minimality all neighbors of x) will route 
messages to t through x, causing a cycle. If k f > k , then 
no neighbor of x would change its behavior, contradict¬ 
ing beneficialness. This implies the conditions on k' in 
(1) and (2). Moreover, beneficialness implies x has a 
neighbor £ that now forwards messages through x, im¬ 
plying its new perceived distance is p(z,t) = k' - hi. By 
the fact that d(x,t) = &, every other neighbor z of x has 
k — 1 < d(z,t) < fc + 1. If all neighbors have distance k — 1 
then no node is forced to send messages to x and implies 
the strategy is not beneficial, so let z be a neighbor with 
d{z, t) > k. 


If d{z , t) = k then the shortest path from 2 to t already 
does not pass through x and we must choose k f = k — 2 to 
change z’s behavior. On the other hand, if d(z, t) = k- hi 
but has no other shortest path to t except through x, 
then lying is not beneficial. If z has another path to t 
then setting k' = k — 1 breaks the tie. □ 

One can simplify the above lemma by noting that set¬ 
ting k' = k — 2 is always nondetrimental, and this is the 
optimal nondetrimental lie. So if an agent has incentive 
to lie, it may as well lie as much as possible. This moti¬ 
vates the following corollary. 

Corollary 5.1. Let x be a single lying agent in G in 
the uniform local broadcast model. An optimal admissible 
strategy for a single lying agent x is to broadcast p(x, t) = 
max(l, d(x, t) - 2 ) for all t G V(G). 

Proof. In the proof of Theorem |5.2[ we showed that a 
vertex x lying in this way cannot produce any cycles of 
length 2 , since it does not alter the behavior of the neigh¬ 
bor through which x routes messages to t. It remains to 
show that there are no longer cycles. 

Suppose to the contrary that when s tries to send a 
message to £, there is a cycle v±,V 2 ,..., 1 = v h 

with m > 3. Let i be the index of a vertex on the cy¬ 
cle which minimizes the true distance d(vi,t). Call this 
distance a, and note that Vi is not a colluding agent (or 
else it could correctly forward messages so as to break 
the cycle). Because there is a cycle, Vi+ 1 is broadcast¬ 
ing p(vi+ 1 ,£) < a — 2 , but d(vi+i,t) > a. And since 
Vi +1 forwards to Vi+ 2 , we have p(vi+ 2 ,t) < a — 3 while 
d(vi+2,t) > cl. We claim this is a contradiction: a col¬ 
luding agent lies by exactly two less than the truth, and 
so Vi +2 cannot be a colluding agent. But the effect of a 
colluding agent’s lie does not change the perceived dis¬ 
tances of any vertex in G by more than two. This shows 
the claimed contradiction. □ 

The same algorithm can be jointly and independently 
used by multiple colluding agents in the uniform broad¬ 
cast model. We make this rigorous with the following 
proposition. 

Proposition 5.1. If any set of colluding agents lie in¬ 
dependently according to Corollary \5.1\ then their joint 
strategy is admissible. 

Proof. In the proof of Theorem |5.2[ we showed that a 
vertex x lying in this way cannot produce any cycles of 
length 2 , since it does not alter the behavior of the neigh¬ 
bor through which x routes messages to t. It remains to 
show that there are no longer cycles. 

Suppose to the contrary that when s tries to send a 
message to £, there is a cycle v±,V 2 ,... iV m ,v m +1 = v h 
with m > 3. Let i be the index of a vertex on the cy¬ 
cle which minimizes the true distance d(vi,t). Call this 
distance a, and note that Vi is not a colluding agent (or 
else it could correctly forward messages so as to break 
the cycle). Because there is a cycle, Vi+\ is broadcast¬ 
ing p(vi+ 1 ,£) < a — 2 , but d(vi+ 1 ,£) > a. And since 


Vi +1 forwards to ^ + 2? we have p0 + 2 0 < a — 3 while 
d(i/i+2,t) > a. We claim this is a contradiction: a col¬ 
luding agent lies by exactly two less than the truth, and 
so Vi +2 cannot be a colluding agent. But the effect of a 
colluding agent’s lie does not change the perceived dis¬ 
tances of any vertex in G by more than two. This shows 
the claimed contradiction. □ 


5.2. Separated agents 


We now turn to the case of multiple colluding agents. 
By Proposition |4.2[ we know that allowing neighboring 
colluding agents introduces the ability for nonuniform 
broadcasts. So we characterize the alternative where no 
two colluding agents are adjacent. The optimal strategy 
we define generalizes to a nontrivial admissible strategy 


for the general case in Section 5.3 


For a set X of integers and an integer j, define Sx(j ) 
to be the set of all permutations of j elements from X. 
In this section C = {x \,... ,Xk} will denote the set of 
colluding nodes, and no two are adjacent in G. 


Definition 5.1. The j -th colluding distance between two 
colluding agents x and y is defined as 


j-i 

dj(x, y) = min Wd(cr(z),CT(i + l)). 
ves c u) —y 

a(l)=x 1 

<j( i)=v 


In other words, it is the length of the shortest path 
from x to y that contains j colluding nodes. Call any 
path minimizing this quantity a j -th colluding path. If 
no such path exists, call dj(x,y) = oc by convention. 

We will consider j -th colluding paths directed from x to 
y when appropriate. Now given a set of colluding nodes 
and a target vertex £, we want to identify the strategy 
that minimizes p(—,£) for all of our colluders. We start 
by defining a candidate strategy p*, observe that it is 
admissible, and then prove it is indeed a lower bound on 
admissible strategies. 

Definition 5.2. Let p'(x,t ) = ma x(d(x,t) — 2,1). Let 
p"{x,t) be defined as 


min [dj(x,Xi) - 2(j - 1 ) + p'(x u t)}. 


Then define the 
min (p'(x,t),p'\x,t)). 


strategy p*(x,t) 


To give some intuition, this strategy takes the mini¬ 
mum of Corollary |5.1| and the best j -th c ollud ing path 
(where the end of that path uses Corollary 5.1 to get to 
t). 

Definition |5.2| is useful in the following scenario de¬ 
picted in Figure p] Suppose (s, x\, 7 / 2 , £ 2 , • • •, yj,Xj,t) is 


a path of length 2j + 1, where t is the target of a mes¬ 
sage sent by s and X{ are colluding agents. Then every Xi 
may broadcast p*0,£) = 1, and the honest agents will 
forward along the path toward t. 

(a) Acutal distances 

d(z , t) = 3 

d(x,t) = 5 ^ 0 ^—® - d(yfi) = 1 

(g w -o—— 

d(u, t) = 2 


(b) Lie independently 

p(z,t) = 1 



d(u, t) = 2 


(c) Colluding 

p(z,t) = 1 

o —= 1 
(§ X —— — ® -o——— 

d(u , t) = 2 

Figure 5. An example of strategies for colluding agents x,y 
and z (shaded circles). Suppose that s wants to send a mes¬ 
sage to t. (a) If no lies involved, s would send the message 
to u who is closest to t. (b) When agents x,y and z do not 
collude, the best strategy for x without causing “black holes” 
is to broadcast p(x, t) — d(x , t) — 2 = 3. s would still send the 
message to u. (c) When taking into account other colluding 
agents, x may broadcast p(x, t) — 1 according to the optimal 
strategy defined in |5.2| and deceive s to send the message 
through x. 

We call x proper for t if it (strictly) minimizes p*(x, t) 
via the j- th colluding distance for some j > 2 and im¬ 
proper otherwise, and we call a j- th colluding path re¬ 
alizing this minimization a witness for the properness of 
x. We define the forwarding number of a j-th colluding 
path to be j , and define the forwarding number of a ver¬ 
tex v to be the smallest forwarding number of any j- th 
colluding path minimizing p*(v,t) starting at v. Note 
that a vertex with a forwarding number 1 is by definition 
improper, and that all of these definitions depend on the 
choice of t. 

Improper colluding nodes forward as in Corollary |5.1| 
Proper colluding agents pick a j- th colluding path which 
minimizes their broadcast. We now prove that p* is an 
admissible strategy. But first, we prove that j-th collud¬ 
ing paths can be extended in a nice way. 

Proposition 5.2. Let x,y be colluding vertices in G. 
Then p* (x, t) < d(x, y) — 2 + p* (p, t). 

Proof. If y is improper, then p*(x,t) has a 2-th colluding 
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path and trivially p*(x,£) < d(x,y) — 2 + p'(y,t) so we 
are done. 

So suppose y is proper with forwarding number j. By 
definition, there is a y' such that p*(y,t) = dj(y,y') — 
2(j — 1) + p'(y ', t). Call the witness path a. Then there is 
a corresponding path a' for x constructed by prepending 
a path from x to y to a. This path is some j'- th colluding 
path for j' > j whose cost is an upper bound on dy (x, y'). 
Hence, 


p*(x,t) < dj'_j(x, y) - 2 (? - j) + dj(y,y') - 2 (j - 1) + p' 
<d(x,y) -2 + p*(y,t), 


as desired. 


□ 


In fact, if x is proper, p*(x, t) is minimized by comput¬ 
ing d(x,y) — 2 + p*(y,t) for some colluding agent y. It 
will have the property that there is a path from x to y 
that passes through no other colluding agents. Proposi¬ 
tion [572] trivially extends to non-colluding agents p, giving 
the following corollary. Note here we use p to denote the 
broadcast (honest or he) of any agent. 

Corollary 5.2. If all colluding agents are following p*, 
then for all x G C,y G V(G), p*(x,t) < d(x,y) — 2 + 

p(y,t )• 


Proof. Let s,t be arbitrary vertices in G, and let L = 
(i/i, 2 / 2 j • • • ? Vm) be a cycle in the path of a message sent 
from s to f (possibly infinite and repeating). If the yi 
are all honest or improper agents we are reduced to the 
case of Proposition [5T] So some of the yi must be proper 
colluding agents. 

Without loss of generality suppose y\ is a colluding 
agent, and let p be the minimal colluding path it for¬ 
wards along, extended to the target t. Let yj be the last 
vertex on L that is not also on p. The claim is that yj ’s 
decision to forward along L or p is a tie break. This 
(pp^ves the proposition because we can then construct a 
corresponding path. 

Let z be the vertex following yj on p, and suppose to 
the contrary p(p J+ i,£) < p(z,t). Let x be the last col¬ 
luding agent on p before yj . Let x' be the first colluding 
agent on p after yj (it may be the case that x f = z). If 
x is the last colluding agent on p, then let x f = t and 
the proof proceeds similarly. First we expand p*(x, t) + 2 
along p. 


p*(x, t) + 2 = d(x, x') + p(x', t) 

= d(x, yj) + 1 + d(z , x') + p(x f , t) 
= d(x,yj) + 1 + p(z,t) 


We now bound p*(x, t) + 2 along L using Corollary 5.2 


Another simple consequence of Proposition 5.2 is that 
the forwarding number decreases along minimal j- th col¬ 
luding paths. 


Proposition 5.3. Suppose x is a proper colluding agent 
with respect to p*(x,t), that x has forwarding number j, 
and that cf is a witnessing j-th colluding path. Let x' 
be the first colluding agent on a after x. Then x' has 
forwarding number j — 1. 


Proof. The same technique from the proof of Proposi¬ 
tion |5.2| shows that whatever the forwarding number of 
x' is, we can prepend a path from x to x' to get a path 
with forwarding number j + 1. □ 


P*0M) + 2 < d(x,yj) + 1 + p(yj+i,t) 
< d(x,yj ) + l + p(z,t) 

= p* (x, t) + 2 


A contradiction. □ 

Next we prove that in the separated setting p* is a 
lower bound on admissible broadcasts. 

Proposition 5.5. Any colluding agent broadcasting 
p(x,t) < p*(x,t) necessarily causes a cycle. 


In particular, the i-th visited colluding agent on a wit¬ 
ness for p*(x,t) of forwarding number j has forwarding 
number exactly j — i, and the end of the path is an im¬ 
proper colluding agent. 

At this point one might expect some sensible extension 
of the pair of (forwarding number, broadcasted distance) 
to honest agents would produce a potential function that 
is monotonically decreasing along the message path and 
zero at the target. Indeed, a version of this is true when 
the colluding agents are separated by distance at least 
three, with ready counterexamples for distance two. Still, 
we present a different argument that p* is also admissible 
when the agents are distance two apart. 

Proposition 5.4. Let C = {aq,..., Xk), and suppose 
that d(xi,Xj) > 2 for all Xi,Xj G C. Then p* is admissi¬ 
ble. 


Proof. Suppose to the contrary some colluding agent x 
broadcasts p(x,t) < p*(x,t). We will show that all 
neighbors of x forward to t through x, necessarily caus¬ 
ing cycle of length 2. Fix any neighbor z and suppose 
to the contrary that there is a neighbor y ^ x of z 
with p(y,t) < p(x,t). But then p(x,t) < p* (x,t) < 
d(x, y) — 2 T p(y , t) = p(p, t ) by Corollary |5.2| a con¬ 
tradiction. □ 

This completes the proof of Theorem |5.1| 

Finally, p* can be efficiently computed. The idea is to 
grow a search tree of colluding agents from £, noting that 
the value of p* for a new vertex is minimized by using 
some set of previously visited nodes. More rigorously, 
for each target t G V(G) run the following procedure. 
Set S = {t}. While C (jL S is missing some colluding 
agent, take any colluding agent with minimal distance to 
S' (true distance in G), and calculate the value of p*(x, t) 
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as p*(x, t ) = mm ye s d(x , y) — 2 + p(y, t). Then add x to S 
and continue. Using the same arguments used previously, 
it is easy to see that this will compute the correct value of 
p* for every colluding agent and every target. Moreover, 
one can construct the corresponding j-th colluding paths 
during this process. We provide some example simula¬ 
tions of using this strategy on synthetic and real-world 
networks in Section [6j 


5.3. Adjacent colluding agents 


In this section we extend the strategy from Section 5.2 


to the setting where colluding agents may be adjacent in 
the network. We show this generalization is not optimal, 
and instead give a family of strategies, one of which must 
be optimal. 

Before we state our theorems, we describe another con¬ 
nection between the uniform and non-uniform models 
from Section [3j that we can transform an instance of 
the uniform model into an instance of the nonuniform 
model in which colluding agents are separated. Specif¬ 
ically, one can take the quotient G/ ~ of the graph G 
by declaring two colluding agents to be equivalent if they 
are in the same connected component in the induced sub¬ 
graph of colluding agents. Uniform strategies translate 
into nonuniform ones as follows. If A is a connected com¬ 
ponent of colluding agents collapsed to va with neighbors 
d G A = N G /^(va), then the broadcast for va to a neigh¬ 
bor w is the minimum over all such broadcasts from ver¬ 
tices in A. Whenever the forwarding policy in G had 
the form: “receive from some w with target t at x G A, 
forward through A to some final node y G A, who for¬ 
wards to w',” the forwarding policy in G/ ~ is: “Forward 
messages from w with target t to w'.” 

Moreover, the concepts of forwarding number and col¬ 
luding paths defined in Section [5T2] for separated agents 
in the uniform model have analogous definitions in the 
nonuniform model. So when we say that a component 
A C V(G ) has a minimal j-th colluding path, the j refers 
to the path in the quotient graph, which lifts to a path 
in G (one of many, and possibly involving many more 
than j colluders). The strategy of forwarding along a 
minimal colluding path lifts from the quotient graph to 
a strategy that forwards along paths between connected 
components. 

With this understanding, the main strategy can be 
sketched as follows. Each connected component of col¬ 
luding agents A C C determines a minimal j-th colluding 
path p t for each target t G V (G) using the algorithm from 
Section pn2| Pick any x G A which is adjacent to the first 
honest vertex w on p t , call this the t-exit node for A, 
and have x broadcast p(x, t) = p(w, t) — 1 as usual. If 
every non-t-exit node in A broadcasts so that the mes¬ 
sage never returns to A, then the proof of Proposition [5A] 
generalizes to prove no cycles occur for this strategy. 

We now describe bounds on the minimality of such 
broadcasts. For A C U(G), denote by d G -A(x,y) the 


distance from x to y in the subgraph induced by V (G) — 
A. When A = {a} is a single node we abuse notation 
and write d G - a . We further write p G -A to denote the 
perceived/broadcast distances when A is removed. Note 
these values change for honest agents when paths are 
eliminated, but not for colluding agents. 

As a simple illustrative first case, suppose there are 
exactly two colluding agents x,y and they are adjacent. 
Let t G V(G) — {x, y}. If y forwards a message to x, who 
in turn forwards to t through w ^ y, then in order to 
prevent the message cycling back though y , we require 
d G - x {w,y) + p(y,t) > d(w,t), which rearranges to give 
a condition on y’s broadcast. If d G - x (w,y) = oo this is 
interpreted as no restriction, and p(y,t) may be 1. 

For a connected component A and target £, a similar 
bound is imposed on every node in A which is not the 
t-exit node. We state it as a theorem. 

Theorem 5.3. Let G be a graph, C C V(G) be a subset 
of colluding agents whose induced subgraph has compo¬ 
nents C\ U • • • U C s . For each component Ci and target 
t, pick a t-exit node v^t G Ci, who behaves as described 
above, and have every x G G* forward messages with tar¬ 
get t to Vi a- Call Wij the node that v^t forwards to. Pick 
any broadcast of the non-exit nodes x G Ci such that for 
all j with Cj having no larger forwarding number, 

p{x,t ) > - d G -( Cj -{x}){wj,t,x), 

setting p(x, t) = 1 if all of the above bounds are non¬ 
positive or — oo. 

This strategy is admissible. 

Proof. As discussed above, it suffices to show that a mes¬ 
sage for t forwarded through Ci to the t-exit node 
never returns to A. Suppose to the contrary the message 
follows some path p hitting x G Ci. Without loss of gen¬ 
erality, x 7 ^ ViA is the first to receive the message. Now 
p(w iit ,x) > d G _( C ._{ x ^(w irt ,x), and so by assumption 
(that x gets the message), they are equal and is in a 
tie-break situation. □ 

This strategy is not optimal. Figure [ 6 ] gives a coun¬ 
terexample, in which the central issue is that two com¬ 
ponents which are tied for minimal forwarding number 
could improve their joint strategy by having one com¬ 
ponent forward through the other. In contrast to the 
separated case, a different choice of forwarding policy 
implies different broadcasts for the nodes. Indeed, if X 
is the space of all strategies induced by all possible for¬ 
warding configurations and the implied broadcasts from 
Theorem |5.3[ it is easy to see that an optimal strategy is 
a member of X. Still, it is unclear whether it is NP-hard 
to pick the optimal forwarding policy. 


6. SIMULATIONS 

We simulated the protocols described in this 
paper on four networks (Figure [7]). (The code 
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Figure 6. A counterexample to the optimality of our strategy 
in the setting where agents can be adjacent. Shaded nodes 
are colluding. If the component with z,y is processed first 
then our algorithm correctly chooses the w, x component to 
have forwarding number 2 (with x broadcasting 1), capturing 
all traffic from a, b to t. On the other hand if w, x is processed 
first the result will miss traffic from a, b. 


tatively large improvement over a simpler strategy. We 
stress that since the p* strategy (as defined in Section 5.2) 
may not be optimal when there are adjacent colluding 
nodes, the plots are lower bounds for the amount of traf¬ 
fic captured by the optimal strategy with a given percent¬ 
age of colluding nodes. For uniform broadcasts and small 
random colluding sets, our estimates are fairly accurate 
because with high probability none of the colluders are 
adjacent. On the other hand, for nonuniform broadcasts 
the optimal strategy for 18 random nodes could very well 
capture more than 10% of messages on the AS network¬ 
ing with uniform traffic. 


7. DISCUSSION AND OPEN PROBLEMS 


used to run the experiments is available at 
https: //git hub.com/j2kun/information-monitoring- 
simulations.) The first is an Erdos-Renyi random graph 
G(n : p) where n = 1000, p = 4/1000. The second is a 
preferential attachment model [3 with 100 nodes. The 
third is a Watts-Strogatz model [27] with n = 1000, 
degree k= 10, and edge-rewiring probability /3 = 0.04. 
The fourth is a snapshot of the Autonomous Systems 
(AS) subgraph of the United States, which has 9,296 
nodes and 17,544 edges. The AS graph comes from the 
website of Newman [ 151 . 

For each network, we inspect the potential advan¬ 
tage of the p* strategy of Section |5.2| over the strat¬ 
egy in which all agents act independently according to 
p(x, t ) = d(x, t ) — 2, and for each strategy we also com¬ 
pared the performance for a randomly chosen subset of 
nodes versus nodes of highest degrees. For various num¬ 
ber of colluding agents, we report the number of paths 
intercepted by the colluding agents in the worst-case sce¬ 
nario, i.e., when there are multiple shortest paths (some 
of which may be “perceived shortest paths”) between the 
source and target of a message, the message would go 
through the paths with no colluding agents. 

It is worth noting that for each of these cases, we as¬ 
sume the demand between every pair of nodes is uniform. 
That is, there is no advantage for the colluders to inter¬ 
cept one shortest path over another. 

Often, large degree nodes tend to be better colluders 
than randomly chosen nodes. Regardless, the benefit of 
colluding is clear even for randomly chosen nodes. In fact 
for the US AS network, if we compromise only 18 random 
nodes (roughly 0.2%) we can intercept an expected 10% 
of the entire network’s traffic. For smaller percentages, 
the randomly selected colluding nodes capture more traf¬ 
fic in the US AS network than in the synthetic models. 
However, for larger percentages the amount of captured 
traffic in the US AS network levels off quite dramatically, 
revealing additional topological structure in the US AS 
network that is not present in the synthetic models. It 
is also interesting to note the relatively small difference 
between the two strategies in the US AS graph, implying 
that in this setting collusion does not provide a quanti- 


In this paper we introduced and related two variants of 
a model of traffic interception in routing networks with 
distance-vector protocols, one for uniform broadcasts and 
one for non-uniform broadcasts. We characterized the 
optimal strategy for the uniform setting in which no two 
colluding agents are adjacent, and provided a family of 
strategies for the general case. We simulated the im¬ 
pact of the optimal strategy in the uniform broadcast¬ 
ing model on an assortment of graphs and found that 
in expectation for the US Autonomous Systems network, 
randomly selecting 0.2% of the nodes to act as colluding 
agents captured 10% of the entire network traffic paths. 

There are a number of directions for future work. For 
example, we could consider alternate definitions of admis¬ 
sibility. In this work we defined strategies to be admissi¬ 
ble as long as there exists a corresponding path between 
every pair of nodes, motivated by the model assump¬ 
tion that honest nodes break ties uniformly at random. 
Instead we can consider different definitions of admissi¬ 
bility, where for every pair of nodes all corresponding 
paths that start and end with those nodes must also be 
simple paths. In the case of the uniform model with a 
single colluding agent x,broadcasting the distance to £, 
p(x,t) = min (d(x,t) — 1,1) satisfies this more restrictive 
definition of admissibility. Alternatively, we may call a 
strategy admissible if the length of a typical correspond¬ 
ing path under the strategy does not drastically differ 
from the length of a typical corresponding path under 
the honest strategy. The last admissibility definition is 
not meant to be taken as a rigorous one; we only wish 
to illustrate the diversity of these alternate admissibility 
definitions. 

We could also ask whether one can efficiently char¬ 
acterize the general case of adjacent agents, or whether 
deciding the appropriate forwarding mechanism is NP- 
hard. In either case, another open direction is to pro¬ 
vide approximation algorithms when the optimal subset 
of colluding agents is unknown. While this is likely to 
correlate with betweenness centrality we would also be 
interested in finding the subset of agents with the largest 
relative improvement. A further improvement to this 
work may also consider realistic network traffic, as op- 
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Figure 7. Fraction of paths intercepted by a varying number of colluding agents on a Erdos-Renyi random graph (top left), a 
preferential attachment graph (top right), a Watts-Strogatz model (bottom left), and the US AS network (bottom right). Blue 
curves correspond to subsets of colluding agents chosen uniformly at random, while red curves to subsets chosen by largest 
degrees. Dashed curves correspond to the strategy where each agent independently lies by an additive factor of two, while solid 
curves to the optimal separated strategy of Section [5~2] The inset graph for the AS network magnifies the leftmost portion of 
the blue curves. 


posed to considering an absolute number of traffic paths 
as the interception objective. 
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